Description

A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Teachers in a quiz group could modify group overrides for other groups in the same quiz.

Remediation

References

CVE-2019-10188

Related Vulnerabilities

WordPress Plugin BulletProof Security Cross-Site Scripting (.53.3)

WordPress Plugin InBoundio Marketing Arbitrary File Upload (2.0.3)

WordPress Plugin ReFlex Gallery 'php.php' Arbitrary File Upload (1.4.6)

Nexus Repository Manager Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2019-5475)

Oracle Application Server Other Vulnerability (CVE-2005-3453)

Severity

Medium

Classification

CVE-2019-10188 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities